Back to search
CVE-2025-0127
Published: Apr 11, 2025
Modified: Apr 11, 2025
PUBLISHED
Description
A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. This issue is only applicable to PAN-OS VM-Series. This issue does not affect firewalls that are already deployed. Cloud NGFW and Prisma® Access are not affected by this vulnerability.
| Vendor | Product | Versions |
|---|---|---|
Palo Alto Networks | Cloud NGFW | unaffected All |
Palo Alto Networks | PAN-OS | unaffected 11.2.0unaffected 11.1.0affected 11.0.0 - < 11.0.4affected 10.2.0 - < 10.2.9affected 10.1.0 - < 10.1.14-h13 |
Palo Alto Networks | Prisma Access | unaffected All |
Weaknesses (CWE)
References
https://security.paloaltonetworks.com/CVE-2025-0127
vendor-advisory
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now